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CLAIMS 



^ TT>rocessing procedure for an electronic system 
subject to\ transient error constraints, characterised 
in that in \ given real time cycle, in other words in a 
give operational cycle of a software task that is 
executed periodically and continuously, two virtual 
sequences located on a single physical sequence are 
multiplexed ih time (the data resulting from each 
execution of 1 virtual sequence being stored so that 
they can be voted before use), and in that if an error 



is detected, 



the real time cycle in progress is 
inhibited and 1 healthy context is reloaded to make a 
restart that consists of a nominal execution of the 
next cycle starring from the reloaded context 



2. Process 
error confinement 
are used. 



3. Process 
plane in the 
singular events 
code . 



according to claim 1, in which three 
areas (time, software and hardware) 



accordin^to claim 1, in which a memory 
control/ utiit is used, protected from 
by air-irror detection and correction 



4. Process 
detection / cor 
operational cycl 1 



according to claim 1 , in which the 
rection granularity used is the computer 
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Process according to claim 1, in which the 
"backup \context" function activated regularly is 
achieved by\ means of an index change. 

6. Process according to claim 1, in which the 
-restore conlexf function activated during an error 
correction isj performed due to the fact that the index 
indicating tie context considered to be healthy, in 



other words e 



rror free, after the previous operational 
cycle has net changed, even though is has usually 
swapped, in other words no errors are detected; this 
"no swap" being inherent to inhibition of the real time 
cycle in which the error is detected. 



7 . Proce 
segmentation 
hardware device 



ss according to claim 1, in which 
of the memory is associated with a 
to check access rights. 



8. Process according to clam 7, in which the 
hardware device to check access rights enables several 
access configurations, each configuration allowing 
access to oni or several non-contiguous segments. 




9. Process according ^To claim 7, in which the 
hardware devifce to check access rights is used to 
select severaV access configurations with logical 
combinations of\me or several keys. 
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1o>\Process according to claim 1, in which the 
variables X data to be voted are put into a table. 



10 



15 



20 



25 



11. Prdlcess according to claim 1, in which a 

software votje is used for which integrity is achieved 

by software checks, particularly including a software 
and hardware monitoring processor. 



12. 

transfer to 
hardware 
the validity 
an hardware 



Pro :es 



s according to claim 1 , in which a 
the control electronics is controlled by a 
that checks access rights and limits 
of this transfer in time, thus delimiting 
error confinement area. 



device 



13. Process according to any one of the previous 
claims, usee in space applications. 

14. Device for monitoring memory accesses in a 
computer comprising a control unit built around a 
microproces Jor and a memory, characterized in that the 
memory is partitioned into segments , in that each 
segment nasi an access right defined by a logical 
function of lall or some^^ the keys available in the 
device, the Access right lS^_e,ach segment being checked 
in real time, \ and in that access for some segments will 
only be authorized if there is a very strong 
probability tha^: the microprocessor will be in a good 
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operating state, thus enabling safe storage of critical 
data. 



10 



15 



20 



25 



15.\pevice according to claim 14, in which a set 
of non-con\tiguous segments is accessible, in read only 
for some ^segments and in read / write for other 
segments, q e P enc *i n 9 on t * ie programming of the keys 
present in t|he device. 



Dev Lee 



16. 

segment size 
for a given 



according to claim 14 in which the 
is arbitrary, so that it can be optimised 
application . 



17. Dev 
definitions 
combination 
conf iguraticjn 
of the 



ice according to claim 14, in which 
of the set of available keys, the logical 
functions for these keys and the 
of the accessible segments as a function 
of the keys, are specific. 



progi amming 



18. Device according to claim 14, in which one of 
the segments! has a write authorization accessible in an 
exceptional state of the/computer, thus enabling safe 
storage of cnitical data, 

19. Device according to claim 14, in which 
segments enabling safe storage of critical data are 
stored by pair, ^working in flip-flop. 
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